GDPR Compliance
Last Updated: September 17, 2026
General Data Protection Regulation
The Great White Barber is committed to protecting the personal data of all individuals in accordance with applicable data protection regulations, including the General Data Protection Regulation where applicable.
Data Controller
The Great White Barber acts as the data controller for personal information collected through our website and business operations. We determine the purposes and means of processing your personal data.
Contact details:
The Great White Barber
127 Wellington Street West
Toronto, ON M5V 1E7
Canada
Email: [email protected]
Legal Basis for Processing
We process personal data under the following legal bases:
- Consent: When you provide explicit consent for specific processing activities
- Contract Performance: When processing is necessary to fulfill service bookings and client agreements
- Legitimate Interests: When processing serves our legitimate business interests while respecting your rights
- Legal Obligation: When required to comply with legal requirements
Your Rights Under GDPR
You have the following rights regarding your personal data:
Right to Access
You may request confirmation of whether we process your personal data and obtain access to such data along with information about processing activities.
Right to Rectification
You may request correction of inaccurate personal data and completion of incomplete data.
Right to Erasure
Under certain circumstances, you may request deletion of your personal data. This right is not absolute and may be limited by legal obligations to retain certain information.
Right to Restriction of Processing
You may request that we restrict processing of your personal data in specific circumstances, such as when you contest the accuracy of the data.
Right to Data Portability
Where technically feasible, you may request that we provide your personal data in a structured, commonly used format or transmit it to another controller.
Right to Object
You may object to processing of your personal data based on legitimate interests or for direct marketing purposes.
Right to Withdraw Consent
Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing conducted before withdrawal.
Exercising Your Rights
To exercise any of these rights, contact us using the information provided above. We will respond to your request within one month, though this period may be extended in complex cases.
We may request additional information to verify your identity before processing requests involving personal data.
Data Transfers
Personal data is primarily processed and stored within Canada. Any transfers to third countries would be conducted in compliance with applicable data protection regulations and with appropriate safeguards in place.
Data Security
We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including protection against unauthorized access, accidental loss, and unlawful processing.
Data Retention
Personal data is retained only for as long as necessary to fulfill the purposes for which it was collected or as required by legal obligations. Specific retention periods depend on the nature of the data and the purpose of processing.
Right to Lodge a Complaint
If you believe our processing of your personal data violates data protection regulations, you have the right to lodge a complaint with the relevant supervisory authority in your jurisdiction.
Automated Decision Making
We do not engage in automated decision-making or profiling that produces legal effects or similarly significant effects on individuals.
Changes to This Notice
We may update this GDPR notice to reflect changes in our practices or legal requirements. Material changes will be communicated through our website.